Forensic Examiner - multiple levels - CLEARED

Constellation Technologies, Inc•Fort Meade, MD

3d•$100,000 - $200,000

About The Position

Constellation Technologies is hiring cleared Forensic Examiners at multiple experience levels to conduct digital and multimedia evidence examinations. The role involves analyzing forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data using commercial, open-source, and approved government forensic tools. Examiners perform evidence identification, image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and reconstruction of user activity. They document chain of custody, prepare forensic analysis reports, and may contribute to tool validation, peer review, expert-witness preparation, quality assurance, metrics, training, and process improvement. The posting lists a salary range of $100,000–$200,000 per year. Due to federal contract requirements, the posting states that U.S. citizenship and an active TS/SCI clearance and polygraph are required; its requirements section specifies a SECRET clearance with active polygraph, with Top Secret and SCI eligibility preferred.

Requirements

Must be a U.S. citizen.
Must have a SECRET clearance with an active polygraph; Top Secret with SCI eligibility is preferred. The posting also states that an active TS/SCI security clearance and polygraph are required due to federal contract requirements.
Experience levels: Level 04 requires at least 12 years; Level 03 requires at least 8 years; Level 02 requires at least 5 years; Level 01 requires at least 2 years.
At least 12 years of hands-on digital forensics experience is listed as a requirement.
Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. In lieu of a bachelor’s degree, an additional four years of hands-on digital forensics experience may be substituted for a degree, for a total of 12 years of experience.
Verifiable completion within the last three years of formal training dedicated to expert witness testimony, rules of evidence, and courtroom procedure (for example, DC3’s 40-hour Forensic Trial Training course) is required if assigned to certain job tasks.
Possess at least one active certification from the listed certifications, or an equivalent certification approved by the COR: DC3 Cyber Training Academy Digital Forensic Examiner (DFE); GIAC Certified Forensic Analyst (GCFA); GIAC Certified Forensic Examiner (GCFE); EnCase Certified Examiner (EnCE); Digital Media Collector (DMC); Digital Forensic Examiner (DFE); Cyber Crime Investigator (CCI); Computer Hacking Forensic Investigator (CHFI); IACIS Certified Forensics Computer Examiner (CFCE); IACIS Certified Mobile Device Examiner (ICMDE); IACIS Certified Advanced Windows Forensics Examiner (CAWFE); Certified Forensic Computer Examiner (CFCE); Cellebrite Certified Mobile Examiner (CCME); Oxygen Forensic Certified Examiner (OFCE); X-Ways Professional in Evidence Recovery Techniques (X-PERT); or Magnet Certified Forensic Examiner (MCFE).

Responsibilities

Conduct forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
Use commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices.
Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
Conduct initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
Maintain accurate chain-of-custody documentation and handle, store, transfer, and dispose of evidence according to laboratory procedures and security requirements.
Prepare complete, technically accurate, and professionally formatted Forensic Analysis Reports.
As needed, validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
As needed, participate in technical peer review of forensic reports and incorporate review comments.
As needed and when designated and qualified, support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony.
As needed, support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
As needed, support collection and analysis of metrics involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
As needed, provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

Benefits

Affordable healthcare options with 80% of the premium paid by the employer, plus a company-funded HSA.
Comprehensive dental insurance.
Vision insurance with 80% of the premium paid by the employer.
Employer-paid life insurance at 100%.
Employer-paid short-term and long-term disability insurance at 100%.
Annual training, continuing education, and professional membership reimbursement.
Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation.
Annual reimbursement for technology such as phones, computers, and printers.
401(k) with company match up to 5% and 100% immediate vesting after 90 days of employment.
Professional development investment and paid time off for training.
Team-building events throughout the year, including destination family events, a holiday party, and monthly get-togethers.
Leadership team engagement and mentorship.
Performance Recognition Program.
Complimentary branded apparel.
Referral bonus of up to $10,000 for eligible referrals through the CTI External Referral Program.